ae/golfed.xyz
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: ae:17872331b985443d0f8e2f43294ea2fea581e13b
Branches Tags
ae:master
..
compare: ae:f281e10cd26b52fd8439779a4cb762a3ce4e197c
Branches Tags
ae:master

No commits in common. "17872331b985443d0f8e2f43294ea2fea581e13b" and "f281e10cd26b52fd8439779a4cb762a3ce4e197c" have entirely different histories.
17872331b9 ... f281e10cd2

2 changed files with 12 additions and 12 deletions
Show Stats Expand all files Collapse all files

2
content/posts/understanding-srdi.md
View File

@ -7,7 +7,7 @@ tags = ['windows', 'srdi']
categories = ['malware']
+++
Shellcode reflective DLL injection (sRDI) still stands as a relatively stealthy technique in the Windows malware scene despite its age. What differentiates it from simpler DLL injection methods is that it doesn't leave apparent traces to the targeted system's disk, which is why it has a chance to bypass basic defensive solutions relying on e.g. signature detection.
In the ever-evolving landscape of malware, Shellcode Reflective DLL Injection (RDI) still stands as a formidable technique despite its age. What differentiates it from traditional DLL injection methods is that it doesn't leave apparent traces to the targeted filesystem, which is why it has a chance to bypass basic defensive solutions relying on behavior monitoring, heuristics, or signature-based detection.
## Steps

22
static/contact.txt
View File

@ -1,19 +1,19 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
clearweb: golfed.xyz, umbrella.haus
onion: golfed6fzytoktol4de4o4nerap3xuykhfm5makfzscib65df3khnpyd.onion
pgp: 1530F5132A1228578D2B4168995EFD5C1B532B3E
email: hello at golfed.xyz
matrix: @ae:golfed.xyz
signal: xmr.02
Clearweb: golfed.xyz, umbrella.haus
Onion: golfed6fzytoktol4de4o4nerap3xuykhfm5makfzscib65df3khnpyd.onion
PGP: 1530F5132A1228578D2B4168995EFD5C1B532B3E
Email: hello@golfed.xyz
Matrix: @ae:golfed.xyz
Signal: @xmr.02
updated: 18/02/2025
Updated: 29/11/2024
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQQVMPUTKhIoV40rQWiZXv1cG1MrPgUCZ7RlwwAKCRCZXv1cG1Mr
PvsLAP9v4JZJ1Flj/cwiFhTx5sEAcyD5unLcDKDgjXgymDwZvAD/QKNXwWzhnoHh
tqwdF8C+zMuW4LuwEeUcdCQXx3fQkwQ=
=Eo3p
iHUEARYKAB0WIQQVMPUTKhIoV40rQWiZXv1cG1MrPgUCZ0mHzQAKCRCZXv1cG1Mr
Pl6yAQCjFkLnaCH9f3BQgAsCwpmjmxQzcOsVoptf4eB08ZJNbAD/RH2Suz1CJSWe
LTusruFyxPEbzDsT+jNvebZRY91A5gQ=
=UfKa
-----END PGP SIGNATURE-----